ACT ADITIONAL LA
CONTRACTUL NR...............
Incheiat astazi, ...................., intre:
Societatea ............ S.R.L, cu sediul în
Bucuresti, ......., înregistrată la Oficiul Registrului
Comerţului sub nr. ......, cod unic de
inregistrare ........, având
bancar .................., deschis la BRD, reprezentată
de ..............., cu funcţia de administrator, în
calitate de .................. (denumit
contnuare, .................)
Şi
Societatea cu
în ......................................................................,
legal reprezentata de Petar Dulic, in calitate
Beneficiar,
in continuare denumiti individual
impreuna Partile.
Articolul 1
1.1 Partile inteleg si sunt de acord ca pe parcursul
sau in legatura cu executarea obiectului
Contractului, Prestatorul poate avea acces la
date cu caracter personal apartinand
Beneficiarului sau sa proceseze date cu
caracter personal in numele si pe seama
Beneficiarului in conformitate cu instructiunile
scrise sau agreate in scris ale acestuia din
urma. Partile inteleg ca aceste date si
persoanele la care se refera fac obiectul unei
prelucrari de date in sensul Regulamentului
(UE) 2016/679 privind protectia persoanelor
fizice in ceea ce priveste prelucrarea datelor
cu caracter personal si privind libera circulatie
a acestor date („Regulamentul GDPR”).
1.2 Scopul prelucrarii il reprezinta executarea
Contractului si, daca este cazul, indeplinirea
propriilor obligatii legale care revin fiecarei parti.
1.3 Tipul de date si categoriile de persoane vizate
in legatura cu executarea Contractului le
enumeram mai jos :
(i) date cu caracter personal: nume / varsta/
sexul / data nasterii / cetatenia/ numarul de telefon
/adresa /e-mail-ul/ datele documentelor de
ADDENDUM TO THE
CONTRACT NO. .................
Enclosed today, , between:
The company S.R.L, with headquarters in
Bucharest,....... , registered with Commerce
Trade Registry under no...... , sole registration
contul code ......., bank account .................................,
opened at BRD, legally represented
by .................., as administrator, as the Provider
in ( referred to as ................),
and
The company ....................., with headquarters
sediul in ............................................................ legally
represented by Petar Dulic, as Beneficiary,
Hereinafter referred to as the Party and together
the Parties.
Partea si
Article 1
1.1 The parties understand and agrees that dur-
ing or in connection with the execution of the ob-
ject of the contract the Provider may have access
to personal data belonging to the Beneficiary or
process personal data in the name and on behalf
of the Beneficiary in accordance with the instruc-
tions or agreed with. The parties understand that
these data and the persons to whom they refer
are processed within the meaning of Regulation
(EU) 2016/679 on the protection of individuals
with regard to the processing of personal data
and on the free movement of such data ("GDPR
").
1.2 The purpose of the processing is to execute
the Contract and, if necessary, to fulfil its own
legal obligations to each party.
1.3 The type of data and the categories of
persons concerned in relation to the execution of
the Contract are listed below:
(i) personal data: name / age / gender / date of
birth / citizenship / telephone number / address /
e-mail / identification data (serial number, etc.) /
identificare (serie, nr, etc)/CNP sau alt identificator
unic national.
(ii) categoriile de persoane vizate:
- conform Legii 656/2002 pentru prevenirea si
sancționarea spalarii banilor si finanțarea actelor
de terorism (“Legea pentru combaterea spalarii
banilor”);
- angajatii Beneficiarului
1.4 Partile sunt de acord ca, in legatura cu orice
procesare a datelor respective, Prestatorul
actioneaza in calitate de imputernicit al
Beneficiarului, acesta din urma avand calitatea de
operator de date cu caracter personal.
1.5 Durata prelucrarii este limitata la (i) perioada
de executare a Contractului sau, (ii) daca este
necesar conform analizei proprii a Prestatorului,
perioada de timp ulterioara executarii Contractului
pentru care legea impune stocarea datelor cu
caracter personal de catre Prestator, caz in care
prevederile prezentului articol vor supravietui
incetarii Contractului si vor continua sa se aplice
pana la finalizarea definitiva a tuturor activitatilor
de procesare a datelor cu caracter special vizate.
1.6 Beneficiarul are obligatia ca, in executarea sau
in legatura cu executarea obiectului Contractului,
sa prelucreze, la randul sau, date cu caracter
personal in conformitate cu legislatia aplicabila
protectiei datelor cu caracter personal, iar orice
instructiuni transmise Prestatorului in legatura cu
aceasta prelucrare sa fie conforme cu legislatia
aplicabila protectiei datelor cu caracter personal.
Prestatorul va avea dreptul, dar nu obligatia, de a
informa Beneficiarul in cazul în care, in opinia sa,
o instructiune incalca legislatia aplicabila
referitoare la protectia datelor. Lipsa unei astfel de
informari nu atrage in niciun fel raspunderea
Prestatorului.
1.7 Beneficiarul va pastra confidentialitatea datelor
prelucrate conform prevederilor relevante din
prezentul Contract.
1.8 Beneficiarul va fi singurul responsabil pentru
acuratetea, calitatea si legalitatea datelor cu
caracter personal procesate, precum si pentru
modalitatea in care Beneficiarul a colectat aceste
CNP or other unique national identifier.
(ii) the categories of persons concerned:
- according to Law 656/2002 on the prevention
and sanctioning of money laundering and the fin-
ancing of acts of terrorism ("Anti-Money Launder-
ing Act");
- Beneficiary’s employees
1.4 The parties agree that, in connection with any
processing of such data, the Provider acts as the
Processor and the Beneficiary as Controller of the
personal data.
1.5 The processing is limited (i) to the period of
performance of the contract or, (ii) if necessary,
after Provider‘s own analyse, to the period after
the performance of the Contract for which the law
requires the storage of personal data by the Pro-
vider, case in which the provisions of this article
will continue to apply after the contract ends until
the definitive completion of all processing activit-
ies of specially targeted data.
1.6 The Beneficiary has the obligation, in per-
forming or in connection with the execution of the
object of the Contract, to process, in his turn, per-
sonal data in accordance with the applicable leg-
islation on the protection of personal data and
any instructions given to the Provider in connec-
tion with such processing shall be in accordance
with the applicable data protection legislation.
The Provider will have the right, but not the obli-
gation, to inform the Beneficiary if, in his opinion,
an instruction violates the applicable data protec-
tion legislation. The lack of such information does
not in any way entail any liability on the part of the
Provider.
1.7 The Beneficiary will preserve the confidential-
ity of the processed data in accordance with the
relevant provisions of this Agreement..
1.8 The Beneficiary shall be solely responsible for
the accuracy, quality and legality of the personal
date. Prestatorul nu va avea nicio obligatie de a
verifica conformitatea afirmatiilor Beneficiarului in
legatura cu datele personale la care are acces in
cursul executarii obiectului Contractului.
1.9 Conform Regulamentului GDPR, Prestatorul
va instiinta Beneficiarul fara intarzieri nejustificate
daca ia cunostinta de orice incalcare a securitatii
datelor cu caracter personal ce fac obiectul
prelucrarii conform prezentului Contract.
1.10 Beneficiarul este unic raspunzator sa se
asigure ca obtine consimtamantul sau are un alt
temei legal pentru transferul datelor cu caracter
personal catre Prestator si prelucrarea ulterioara
de catre acesta din urma a datelor in executarea
obiectului Contractului.
1.11 Beneficiarul este de acord ca Prestatorul are
dreptul (i) sa contracteze sub-imputernicti si (ii)
sub-imputernicitii au dreptul sa angajeze alte terte
parti avand calitatea de sub-imputerniciti, pentru
procesarea datelor cu caracter personal, in
legatura cu executarea obiectului Contractului.
Beneficiarul are obligatia sa obtina
consimtamantul persoanelor vizate pentru
transferul datelor cu caracter personal catre astfel
de sub-imputerniciti. Prestatorul il va notifica pe
Beneficiar de fiecare data cand adauga sau
exclude un sub-imputernicit.
1.12 Prestatorul va implementa masuri rezonabile
pentru asigurarea respectarii cerintelor de
securitate adecvate si minimizarii impactului
asupra protectiei datelor. Cu toate acestea, Partile
sunt de acord ca nicio informatie nu poate fi 100%
securizata in era digitala.
1.13 Prestatorul va notifica de indata Beneficiarul,
cu exceptia cazului in care potrivit legii este obligat
sa pastreze confidentialitatea, in cazul in care
primeste o solicitare din partea unei persoane
vizate sau a unei autoritati publice, Prestatorul
neavand vreo obligatie de analiza sau solutionare
a respectivei solicitari. Prestatorul va acorda
asistenta rezonabila pentru solutionarea
respectivei solicitari, in masura in care Beneficiarul
solicita aceasta, fiind indreptatit la recuperarea de
la Beneficiar a costurilor angajate in acest scop.
1.14 La incetarea Contractului din orice motiv,
Prestatorul se va conforma instructiunilor
rezonabile ale Beneficiarului cu privire la datele cu
caracter personal procesate conform prezentului
Contract si, la alegerea acestuia din urma, va
sterge sau va returna datele cu caracter personal
si va elimina copiile existente, cu exceptia cazului
in care legislatia aplicabila prevede altfel,
data processed, as well as for the manner in
which the Beneficiary has collected such data.
The Provider will have no obligation to verify the
compliance of the Beneficiary's claims with re-
spect to the personal data to which he has ac-
cess during the execution of the Contract object.
1.9 Under the GDPR Regulation, the Provider will
notify the Beneficiary without undue delay if he
becomes aware of any breach of the security of
the personal data that is subject to processing un-
der this Agreement.
1.10 The Beneficiary is the only responsible for
ensuring that he obtains consent or has another
legal basis for the transfer of personal data to the
Provider and the subsequent processing by the
latter of the data in the execution of the object of
the Contract.
1.11 The Beneficiary agrees that the Provider is
entitled (i) to contract sub-processors and (ii) sub-
processors have the right to engage other third
parties having the capacity of sub-processors for
processing personal data in connection with the
object of the contract.
The Beneficiary has the obligation to obtain the
consent of the subject person for the transfer of
the personal data to such sub-processors.
The Provider shall notify the Beneficiary every
time when adds or excludes a sub-processor.
1.12 The Provider Prestatorul will implement
reasonable measures to ensure compliance with
appropriate security requirements and minimize
the impact on data protection. However, the
Parties agree that no information can be 100%
secured in the digital age.
1.13 The Provider will promptly notify the Benefi-
ciary, unless he is required by law to maintain
confidentiality, if he receives a request from a
person or public authority, the Provider being held
by no obligation for analyzing or solving that re-
quest. The provider will offer assistance for solv-
ing the namely request if the Beneficiary wishes
so with, being entitled to recover from the Benefi-
ciary the costs incurred for that purpose.
1.14 Upon termination of the Contract for any rea-
son, the Provider shall comply with the reason-
able instructions of the Beneficiary regarding per-
sonal data processed under this Agreement and
at its option, delete or return personal data and
remove existing copies, unless the applicable law
otherwise provides, the Recipient being solely re-
Beneficiarul fiind unicul responsabil pentru
instructiunile date conform prezentului articol.
Articolul 2
2.1 Restul prevederilor contractuale raman
nemodificate si pe deplin aplicabile. Prezentul Act
aditional si Anexa 1 fac parte integranta din
Contract, pe care il completeaza.
Prezentul act aditional si Anexa 1 au fost încheiate
în două exemplare, câte unul pentru fiecare parte.
PRESTATOR
...................... S.R.L
Prin .....................
BENEFICIAR
..................................
Prin ............................
sponsible for the instructions given under this Ar-
ticle.
Article 2
2.2 The other contractual clauses remain
unchanged and fully applicable. This addendum
and the Annex 1 are integral part of the contract
and complete it.
This addendum and the Annex 1 were concluded
in two original copies, one for each party.
PROVIDER
................... S.R.L
By .................
BENEFICIARY
............................
By .........................
 ANNEX

1. CATEGORII DE DATE PROCESATE/ CATEGORIES OF PROCESSED DATA

Legenda: Datele cu caracter personal ce pot fi procesate in cursul executarii Contractului sunt marcate
cu „X” in tabelul de mai jos./ Legend: Personal data that may be processed durin the execution of the
Contract will be marked with „X” in the table below:

Categorie Date cu Caracter Personal Confirmare

procesare

Numele/Name X

Vârsta/Age X

Sexul/Gender X

Data nașterii / Date of birth X

Cetățenia/Citizenship X

Starea civilă/Marital status X

Ocupatia/Ocupation X

Numărul de telefon/Telephone number X

Adresa/Address X

E-mail X

Datele documentelor de identificare (serie, numar etc.)/ID data (series, X

number, etc)

CNP sau alt identificator unic national/ PIN or another national unic X
identifyer

Altele (se vor inscrie categoriile de date care nu sunt incluse in lista de mai
sus) / Others (there will be mentioned the data categories not included in the
list from above)

- all documents contained in the employees' personnel file and required

labor law (such as: training - studies, diplomas, image, medical leave, data
on husband / wife or children or other family members, bank accounts,
details about medicine work, the statement of the employees in the care of
the employee)
 2. CATEGORII DE PERSOANE VIZATE/CATEGORIES OF TARGETED PERSONS

1. Beneficiary’s employees

PRESTATOR / PROVIDER BENEFICIAR/BENEFICIARY

................................ S.R.L ........................................................S.R.L.
Prin/By ............................ Prin/By .............................